Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230131 5 警告 VMware - VMware ESX Server におけるメモリ二重解放の脆弱性 CWE-189
数値処理の問題
CVE-2007-1270 2012-12-20 18:19 2007-04-5 Show GitHub Exploit DB Packet Storm
230132 5 警告 Sylpheed - Sylpheed における検出されずにメッセージ内容を偽造される脆弱性 - CVE-2007-1267 2012-12-20 18:19 2007-03-6 Show GitHub Exploit DB Packet Storm
230133 7.5 危険 webmod - WebMod の server.cpp におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1260 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
230134 7.5 危険 web-app.org - WebAPP における脆弱性 CWE-noinfo
情報不足
CVE-2007-1259 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
230135 9.3 危険 シマンテック - SMTP 用の Symantec Mail Security におけるバッファオーバーフローの脆弱性 - CVE-2007-1252 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
230136 6.8 警告 WordPress.org - WordPress の AdminPanel におけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2007-1244 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
230137 6.4 警告 sitex - sitex における重要な情報を取得される脆弱性 - CVE-2007-1236 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
230138 7.5 危険 stwc-counter - STWC-Counter の downloadcounter.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2007-1233 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
230139 5.1 警告 SQLiteManager - SQLiteManager におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1232 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
230140 4.3 警告 SQLiteManager - SQLiteManager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2007-1231 2012-12-20 18:19 2007-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313051 6.1 MEDIUM
Network
cisco unified_communications_manager A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could a… CWE-79
Cross-site Scripting
CVE-2024-20488 2024-09-7 02:18 2024-08-22 Show GitHub Exploit DB Packet Storm
313052 - - - Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-45294. Reason: This candidate is a duplicate of CVE-2024-45294. Notes: All CVE users should reference CVE-2024-452… - CVE-2024-45295 2024-09-7 02:15 2024-09-7 Show GitHub Exploit DB Packet Storm
313053 - - - The HL7 FHIR Core Artifacts repository provides the java core object handling code, with utilities (including validator), for the Fast Healthcare Interoperability Resources (FHIR) specification. Prio… - CVE-2024-45294 2024-09-7 02:15 2024-09-7 Show GitHub Exploit DB Packet Storm
313054 9.8 CRITICAL
Network
mozilla thunderbird
firefox_esr
firefox
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could… CWE-787
 Out-of-bounds Write
CVE-2024-8387 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
313055 9.8 CRITICAL
Network
mozilla firefox
firefox_esr
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2… CWE-843
Type Confusion
CVE-2024-8385 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
313056 9.8 CRITICAL
Network
mozilla firefox_esr
firefox
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulner… CWE-787
 Out-of-bounds Write
CVE-2024-8384 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
313057 9.8 CRITICAL
Network
mozilla firefox_esr
firefox
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < … CWE-843
Type Confusion
CVE-2024-8381 2024-09-7 02:15 2024-09-3 Show GitHub Exploit DB Packet Storm
313058 10.0 CRITICAL
Network
wpindeed ultimate_membership_pro Deserialization of Untrusted Data vulnerability in azzaroco Ultimate Membership Pro allows Object Injection.This issue affects Ultimate Membership Pro: from n/a through 12.6. CWE-502
 Deserialization of Untrusted Data
CVE-2024-43242 2024-09-7 01:57 2024-08-20 Show GitHub Exploit DB Packet Storm
313059 7.5 HIGH
Network
raidenmaild raidenmaild Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server. CWE-22
Path Traversal
CVE-2024-7693 2024-09-7 01:51 2024-08-12 Show GitHub Exploit DB Packet Storm
313060 - - - H2O.ai H2O through 3.46.0.4 allows attackers to arbitrarily set the JDBC URL, leading to deserialization attacks, file reads, and command execution. Exploitation can occur when an attacker has access… - CVE-2024-45758 2024-09-7 01:46 2024-09-7 Show GitHub Exploit DB Packet Storm